{"id":"https://openalex.org/W7154744588","doi":"https://doi.org/10.1109/tnsm.2026.3684653","title":"On Graph Design for GNN-Based Network Anomaly Detection","display_name":"On Graph Design for GNN-Based Network Anomaly Detection","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7154744588","doi":"https://doi.org/10.1109/tnsm.2026.3684653"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2026.3684653","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2026.3684653","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://hal.science/hal-05596787","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5116266236","display_name":"Killian Cressant","orcid":null},"institutions":[{"id":"https://openalex.org/I124158823","display_name":"Conservatoire National des Arts et M\u00e9tiers","ror":"https://ror.org/0175hh227","country_code":"FR","type":"education","lineage":["https://openalex.org/I124158823","https://openalex.org/I4210134562"]}],"countries":["FR"],"is_corresponding":true,"raw_author_name":"Killian Cressant","raw_affiliation_strings":["CEDRIC Laboratory, Conservatoire National des Arts et Métiers (CNAM), Paris, France"],"raw_orcid":"https://orcid.org/0009-0006-0631-757X","affiliations":[{"raw_affiliation_string":"CEDRIC Laboratory, Conservatoire National des Arts et Métiers (CNAM), Paris, France","institution_ids":["https://openalex.org/I124158823"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017017294","display_name":"Federico Larroca","orcid":"https://orcid.org/0000-0001-7893-2201"},"institutions":[{"id":"https://openalex.org/I180910786","display_name":"Universidad de la Rep\u00fablica de Uruguay","ror":"https://ror.org/030bbe882","country_code":"UY","type":"education","lineage":["https://openalex.org/I180910786"]}],"countries":["UY"],"is_corresponding":false,"raw_author_name":"Federico Larroca","raw_affiliation_strings":["Universidad de la República, Montevideo, Uruguay"],"raw_orcid":"https://orcid.org/0000-0001-7893-2201","affiliations":[{"raw_affiliation_string":"Universidad de la República, Montevideo, Uruguay","institution_ids":["https://openalex.org/I180910786"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025676566","display_name":"Stefano Secci","orcid":"https://orcid.org/0000-0002-6129-0676"},"institutions":[{"id":"https://openalex.org/I124158823","display_name":"Conservatoire National des Arts et M\u00e9tiers","ror":"https://ror.org/0175hh227","country_code":"FR","type":"education","lineage":["https://openalex.org/I124158823","https://openalex.org/I4210134562"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Stefano Secci","raw_affiliation_strings":["CEDRIC Laboratory, Conservatoire National des Arts et Métiers (CNAM), Paris, France"],"raw_orcid":"https://orcid.org/0000-0002-6129-0676","affiliations":[{"raw_affiliation_string":"CEDRIC Laboratory, Conservatoire National des Arts et Métiers (CNAM), Paris, France","institution_ids":["https://openalex.org/I124158823"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5133864225","display_name":"Pedro B. Velloso","orcid":"https://orcid.org/0000-0002-2920-394X"},"institutions":[{"id":"https://openalex.org/I124158823","display_name":"Conservatoire National des Arts et M\u00e9tiers","ror":"https://ror.org/0175hh227","country_code":"FR","type":"education","lineage":["https://openalex.org/I124158823","https://openalex.org/I4210134562"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Pedro Braconnot Velloso","raw_affiliation_strings":["CEDRIC Laboratory, Conservatoire National des Arts et Métiers (CNAM), Paris, France"],"raw_orcid":"https://orcid.org/0000-0002-2920-394X","affiliations":[{"raw_affiliation_string":"CEDRIC Laboratory, Conservatoire National des Arts et Métiers (CNAM), Paris, France","institution_ids":["https://openalex.org/I124158823"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5116266236"],"corresponding_institution_ids":["https://openalex.org/I124158823"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.70068681,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":null,"first_page":"4122","last_page":"4134"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.258899986743927,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.258899986743927,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.1257999986410141,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.11069999635219574,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5461999773979187},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.46070000529289246},{"id":"https://openalex.org/keywords/graph-theory","display_name":"Graph theory","score":0.3337000012397766},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.33000001311302185},{"id":"https://openalex.org/keywords/algorithm-design","display_name":"Algorithm design","score":0.3167000114917755},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.2721000015735626}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7706000208854675},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5461999773979187},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.46070000529289246},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.36489999294281006},{"id":"https://openalex.org/C88230418","wikidata":"https://www.wikidata.org/wiki/Q131476","display_name":"Graph theory","level":2,"score":0.3337000012397766},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.33000001311302185},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3221000134944916},{"id":"https://openalex.org/C106516650","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm design","level":2,"score":0.3167000114917755},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2971999943256378},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2721000015735626},{"id":"https://openalex.org/C104267543","wikidata":"https://www.wikidata.org/wiki/Q208163","display_name":"Signal processing","level":3,"score":0.26660001277923584},{"id":"https://openalex.org/C199845137","wikidata":"https://www.wikidata.org/wiki/Q145490","display_name":"Network topology","level":2,"score":0.263700008392334},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.260699987411499},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.25519999861717224}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tnsm.2026.3684653","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2026.3684653","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},{"id":"pmh:oai:HAL:hal-05596787v1","is_oa":true,"landing_page_url":"https://hal.science/hal-05596787","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Transactions on Network and Service Management, 2026, 23, pp.1-1. ⟨10.1109/TNSM.2026.3684653⟩","raw_type":"Journal articles"}],"best_oa_location":{"id":"pmh:oai:HAL:hal-05596787v1","is_oa":true,"landing_page_url":"https://hal.science/hal-05596787","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Transactions on Network and Service Management, 2026, 23, pp.1-1. ⟨10.1109/TNSM.2026.3684653⟩","raw_type":"Journal articles"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Graph":[0],"Neural":[1],"Networks":[2],"(GNNs)":[3],"have":[4],"gained":[5],"significant":[6],"attention":[7],"for":[8,43,48,95],"multivariate":[9],"time":[10,49],"series":[11,50],"analysis":[12],"in":[13,28,53,104],"recent":[14],"years.":[15],"However,":[16],"applying":[17],"them":[18],"to":[19,136],"real-world":[20,68,121],"networking":[21,122],"data":[22],"introduces":[23],"several":[24],"key":[25],"challenges,":[26],"particularly":[27],"designing":[29],"meaningful":[30],"and":[31,73,124,130,141],"effective":[32],"graph":[33,87,101],"structures.":[34],"In":[35],"this":[36],"paper,":[37],"we":[38,131],"propose":[39],"a":[40],"novel":[41],"method":[42],"constructing":[44],"initial":[45],"graphs":[46],"tailored":[47],"anomaly":[51,96],"detection":[52,97],"complex":[54],"network":[55],"environments.":[56],"Our":[57],"approach,":[58],"called":[59],"COSI":[60,85,115],"(COrrelation":[61],"SImilarity),":[62],"leverages":[63],"two":[64,120],"fundamental":[65],"properties":[66],"of":[67],"data:":[69],"feature":[70],"name":[71],"semantics":[72],"statistical":[74],"correlation.":[75],"By":[76],"combining":[77],"natural":[78],"language":[79],"processing":[80],"(NLP)":[81],"with":[82],"correlation":[83],"analysis,":[84],"produces":[86],"structures":[88],"that":[89],"significantly":[90],"enhance":[91],"GNN":[92],"model":[93],"performance":[94],"tasks,":[98],"outperforming":[99],"conventional":[100],"construction":[102],"methods":[103],"almost":[105],"all":[106,110],"evaluation":[107],"scores":[108],"across":[109],"datasets.":[111],"We":[112],"extensively":[113],"evaluate":[114],"on":[116],"three":[117],"datasets,":[118],"including":[119],"datasets":[123],"one":[125],"widely":[126],"used":[127],"benchmark":[128],"dataset,":[129],"open":[132],"source":[133],"the":[134,145],"implementation":[135],"encourage":[137],"reproducibility,":[138],"further":[139],"research,":[140],"practical":[142],"adoption":[143],"by":[144],"community.":[146]},"counts_by_year":[],"updated_date":"2026-05-20T08:49:12.498775","created_date":"2026-04-18T00:00:00"}